Skip to content
OpenAdvisories

Vendor

bestwebsoft

33 known vulnerabilities.

Products

Contact Form Plugin 3 Gallery 2 Twitter Plugin 2 Contact Form 2 Profile Extra Fields by BestWebSoft 2 Facebook Like Button 2 Portfolio Plugin 2 Pagination 2 Contact Form by BestWebSoft – Advanced WP Contact Form Builder for WordPress 2 Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress 2 Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress 2 Captcha by BestWebSoft 2 Car Rental by BestWebSoft 1 Limit Attempts by BestWebSoft 1 Job Board Plugin 1 Captcha 1 Car Rental 1 Contact Form Multi 1 Contact Form to DB 1 Custom Admin Page 1 Custom Fields Search 1 Custom Search 1 Donate 1 Email Queue 1 Error Log Viewer 1 Facebook Button 1 Featured Posts 1 Gallery Categories 1 Google +1 1 Google AdSense 1 Google Analytics 1 Google Captcha (reCAPTCHA) 1 Google Maps 1 Google Shortlink 1 Google Sitemap 1 Htaccess 1 Job Board 1 Latest Posts 1 Limit Attempts 1 LinkedIn 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.2
    CVE-2026-2497

    Gallery by BestWebSoft <= 4.7.9 - Authenticated (Editor+) SQL Injection via Gallery Image Order Array Keys

    The Gallery by BestWebSoft plugin for WordPress is vulnerable to SQL Injection via the '_gallery_order_{post_id}' parameter array keys in all versions up to, and including, 4.7.9. This is due to insufficient escaping on the user supplied parameter and lack of…

    bestwebsoft Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress Web / CMS
  • High 8.5
    CVE-2026-57642

    WordPress Gallery plugin <= 4.7.8 - SQL Injection vulnerability

    Contributor SQL Injection in Gallery <= 4.7.8 versions.

    bestwebsoft Gallery
  • High 7.2
    CVE-2024-13906

    Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress <= 4.7.3 - Authenticated (Administrator+) PHP Object Injection

    The Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.7.3 via deserialization of untrusted input in the 'import_gallery_from_csv' fu…

    bestwebsoft Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress Web / CMS
  • High 8.5
    CVE-2024-35678

    WordPress Contact Form to DB by BestWebSoft plugin <= 1.7.2 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BestWebSoft Contact Form to DB by BestWebSoft.This issue affects Contact Form to DB by BestWebSoft: from n/a through 1.7.2.

    bestwebsoft Contact Form to DB by BestWebSoft
  • High 7.1
    CVE-2024-30439

    WordPress Limit Attempts by BestWebSoft plugin <= 1.2.9 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BestWebSoft Limit Attempts by BestWebSoft allows Reflected XSS.This issue affects Limit Attempts by BestWebSoft: from n/a through 1.2.9.

    bestwebsoft Limit Attempts by BestWebSoft
  • High 8.5
    CVE-2023-29096

    WordPress Contact Form to DB by BestWebSoft Plugin <= 1.7.0 is vulnerable to SQL Injection

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BestWebSoft Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress.This issue affects Contact Form to DB by BestWebSoft – Messages Databa…

    bestwebsoft Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress Web / CMS
  • High 7.6
    CVE-2023-36508

    WordPress Contact Form to DB by BestWebSoft Plugin <= 1.7.1 is vulnerable to SQL Injection

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BestWebSoft Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress contact-form-to-db allows SQL Injection.This issue affects Contact For…

    bestwebsoft Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress Web / CMS